Information Security Manager

NTT Com Asia; Hong Kong; On-site; HKD 600,000 - 900,000; Full time

Job summary

NTT Com Asia is seeking a senior InfoSec professional to manage the technical domain of company-wide information security, developing and maintaining best practices to ensure robust compliance across the organization. This role requires a proactive individual with a strong technical security background and a passion for continuous improvement.

You will lead governance, incident response, risk assessment, and security operations for IT and OT systems, coordinating with stakeholders to deploy

Qualifications

• Degree in Computer Science, Information Technology, Computer Engineering or related disciplines
• 5+ years of information & cybersecurity in enterprise environment
• Hands-on experience with security tools for Incident Response, vulnerability management, network & endpoint security, IAM, and cloud security
• Security certifications such as CISSP, CISM are MUST
• Additional certifications like CCNP or MCSE are preferable
• Experience as expert engineer on security technology solutions across IDS/IPS, SIEM and firewall

Responsibilities

• Review company-wide information security policies and standards to align with market standards and group policies
• Provide leadership to security stakeholders to ensure IT/OT systems compliance with information protection requirements
• Oversee continuous monitoring of IT and OT systems for security breaches, vulnerabilities, and patching
• Identify vulnerabilities and advise on mitigations
• Lead incident owners in responding to security incidents and cyber-attacks
• Conduct audits of daily operations by reviewing logs and reviewing configuration changes

Skills

Security management

Cybersecurity governance

Threat analysis

Incident response

Risk assessment

Education

Bachelor in CS/IT/Engineering

Tools

SIEM

Nessus

Defender

Zscaler

EDR

PAM

Azure

AWS

Job description

A senior professional within InfoSec Management who responsible for managing technical domain of the company-wide information security. Developing and maintaining best practice security measures ensuring robust security compliance throughout the whole company. This role requires a proactive individual with a strong technical security background and a passion for continuous improvement.

Job Responsibilities

• Review the company-wide information security policies, procedures and standards to ensure the alignment with market standards and Group policies
• Provide leadership and consulting to multiple interdepartmental security stakeholders including guidance and instruction to ensure all IT and OT critical systems/applications compliance with information protection from government ordinance and industry regulations
• Oversee continuous monitoring of IT and OT systems/applications for security breaches, unauthorized access, malicious activities, vulnerability patching, etc.
• Identify potential security vulnerabilities and assess risks, advise system owners to deploy appropriate mitigation and protection
• Lead incident owners in responding to security incident or cyber-attacks, analyzing the causes and collaborating with system/application owners to implement remedial action and improvement plan
• Conduct deep-dive checking and audit of daily operation by reviewing system logs, participating implementation, preview & post-check of critical configuration change in view of security

Job Requirements

• Degree in Computer Science, Information Technology, Computer Engineering or related disciplines
• 5+ years of increasingly responsible experience in information & cybersecurity in enterprise environment covering application systems and Infrastructure with proven record in information security management role
• Hand on experience of the security tools in Incident Response (SIEM, SOC, Sentinel), vulnerability management (Nessus, Defender, Qualys), Network & Endpoint security (Firewall, Zscaler, EDR), Identity and Access (PAM) and Cloud Security (Azure and AWS)
• Holder of Security certification such as CISSP, CISM is a MUST
• Holder of Certification such as CCNP, MCSE is preferrable
• With experience in Expert engineer level on security technology solutions for the company across a range of information security areas such as IDS/IPS. SIEM, Firewall, and antivirus
• Capable to perform operating system, network and application vulnerability assessments
• Practical knowledge on intrusion detection methodologies, techniques & tools for detecting host and network-based intrusions
• Good knowledge of ITILv3, ISO27001, cybersecurity technologies and emerging threat vectors
• Able to work under pressure and handle multi-tasks without compromising quality
• Be open mind and willing to take challenge from adopting new technologies and re-engineering

This role will lead the system integration business end to end, with accountability for strategy, commercial performance, solution delivery, customer engagement, governance, service transition, partner management, and team capability development.